> >In message <amekz9fh6n.fsf@nutcracker.stacken.kth.se>, Love writes:
> >>Some authentication mechs want to run in the same enviroment as the user,
> >>others want to run with elevented privileges. Obviously these too goals
> >>collide unless someone invents the equivalent of suid shared-libs.
> >Well, my immediate problems can be solved by BSD Auth.
> Cool - implement BSD Auth as a PAM module and everyone wins (that btw
> gives an avenue to addressing the point above).
if "BSD auth as a PAM module" is possible, we could just
implement BSD auth (no PAM), and then someone who has
time/interest in PAM can migrate to "BSD auth as a PAM module",
without breaking anything.
itojun